JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

146.59.227.252

Neutral Activity

Abuse confidence score ?

0% Low Risk

74 reports

36 reporters · latest 2 years ago

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	vps-7362f796.vps.ovh.net
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

146.59.227.252 has been reported 74 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 146.59.227.252

Export CSV

This IP address has been reported a total of 74 times from 36 distinct sources. 146.59.227.252 was first reported on October 1st 2022, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 mawan	2023-11-28 01:56:13 (2 years ago)	Suspected of having performed illicit activity on AMS server.	Web App Attack
🇩🇪 www.elinox.de	2023-11-27 11:51:21 (2 years ago)	27.11.2023 12:51:24 - Wordpress fail Detected by ELinOX-ALM	Hacking Web App Attack
🇺🇸 TPI-Abuse	2023-11-26 06:48:00 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 26 01:47:54.806264 2023] [security2:error] [pid 13116] [client 146.59.227.252:48534] [client 146.59.227.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrpinman.org"] [uri "/.git/config"] [unique_id "ZWLqGhi5sK_tucR1e9F6LQAAAAQ"], referer: https://mrpinman.org show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2023-11-26 05:32:20 (2 years ago)	Many_bad_calls	Web App Attack
🇺🇸 TPI-Abuse	2023-11-25 21:13:29 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 25 16:13:22.193385 2023] [security2:error] [pid 2926:tid 47513031714560] [client 146.59.227.252:39488] [client 146.59.227.252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sparkhypnotherapy.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sparkhypnotherapy.com"] [uri "/backup.sql"] [unique_id "ZWJjcvu0k-y3sDBfob6-EwAAAFY"], referer: / show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 taivas.nl	2023-11-25 10:32:10 (2 years ago)	Bad_requests	Bad Web Bot
🇺🇸 TPI-Abuse	2023-11-23 23:02:40 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 23 18:02:34.278108 2023] [security2:error] [pid 11577] [client 146.59.227.252:55070] [client 146.59.227.252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|nifeconsult.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nifeconsult.com"] [uri "/backup.sql"] [unique_id "ZV_aCmsEMkfmzBvnZQcBhQAAABY"], referer: / show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2023-11-22 22:10:45 (2 years ago)	21 attempts against mh_ha-misbehave-ban on rose	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-22 08:02:59 (2 years ago)	(mod_security) mod_security (id:210730) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210730) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 22 03:02:53.350295 2023] [security2:error] [pid 17908] [client 146.59.227.252:49648] [client 146.59.227.252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|biblioteca.atreyu.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "biblioteca.atreyu.net"] [uri "/backup.sql"] [unique_id "ZV21rTfAgGkJBRg0g-EOKwAAAAU"], referer: / show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-22 00:03:36 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 21 19:03:29.544723 2023] [security2:error] [pid 2891] [client 146.59.227.252:59358] [client 146.59.227.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web215.dnchosting.com"] [uri "/.git/config"] [unique_id "ZV1FUSyeZyB_BcjtGd2fWAAAAAA"], referer: https://web215.dnchosting.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-11-21 19:17:43 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 21 14:17:37.856998 2023] [security2:error] [pid 12309] [client 146.59.227.252:32966] [client 146.59.227.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindtoken.app"] [uri "/.git/config"] [unique_id "ZV0CUVdwaXCMuy6J1xf2BgAAAAU"], referer: https://mindtoken.app show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 rakkor	2023-11-21 14:20:23 (2 years ago)	2023/11/21 14:20:22 [error] 21716#21716: 161960 open() "/var/services/web/debug/default/view" faile ... show more 2023/11/21 14:20:22 [error] 21716#21716: 161960 open() "/var/services/web/debug/default/view" failed (2: No such file or directory), client: 146.59.227.252, server: , request: "GET /debug/default/view?panel=request HTTP/1.1", host: "jksimmons.uk", referrer: "/debug/default/view?panel=request" ... show less	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2023-11-21 08:01:32 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 21 03:01:26.795588 2023] [security2:error] [pid 10260] [client 146.59.227.252:34464] [client 146.59.227.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mehtamechanicalinc.com"] [uri "/.git/config"] [unique_id "ZVxj1rN_WsH15_CWqPcXUQAAABA"], referer: https://mehtamechanicalinc.com show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-11-21 07:46:52 (2 years ago)	(mod_security) mod_security triggered on hostname [redacted] 146.59.227.252 (FR/France/vps-7362f796. ... show more (mod_security) mod_security triggered on hostname [redacted] 146.59.227.252 (FR/France/vps-7362f796.vps.ovh.net) show less	SQL Injection
🇺🇸 TPI-Abuse	2023-11-21 06:51:51 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in ... show more (mod_security) mod_security (id:210492) triggered by 146.59.227.252 (vps-7362f796.vps.ovh.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 21 01:51:45.566921 2023] [security2:error] [pid 4291] [client 146.59.227.252:60002] [client 146.59.227.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electronstructure.net"] [uri "/.git/config"] [unique_id "ZVxTgfsiYKSfgxsMA63X4QAAAAU"], referer: https://electronstructure.net show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 91.230.168.20

🇫🇷 84.247.170.122

🇺🇸 20.65.219.194

🇷🇴 2.57.121.25

🇨🇳 125.77.73.145

🇰🇷 118.130.231.254

🇫🇷 91.196.152.188

🇬🇧 89.37.172.144

🇮🇹 84.37.154.73

🇺🇸 65.49.1.118

🇸🇬 47.84.103.98

🇬🇧 35.203.211.197

🇺🇸 20.127.172.31

🇺🇸 20.106.39.75

🇺🇸 20.84.164.167

🇺🇸 20.84.164.122

🇺🇸 2001:470:1:fb5::260

🇰🇷 220.126.8.143

🇨🇳 117.69.255.239

🇻🇳 115.76.174.232